| Package | Affected versions | Patched versions |
|---|---|---|
| infinitewp | < 3.1.12.3 | 3.1.12.3 |
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free